* [meta-security][PATCH] ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic
@ 2021-03-01 12:35 Ming Liu
2021-03-04 21:04 ` akuster
0 siblings, 1 reply; 2+ messages in thread
From: Ming Liu @ 2021-03-01 12:35 UTC (permalink / raw)
To: yocto; +Cc: sergio.prado, akuster808, Ming Liu
From: Ming Liu <liu.ming50@gmail.com>
This fixes following systemd boot issues:
[ 7.455580] systemd[1]: Failed to create /init.scope control group: Permission denied
[ 7.457677] systemd[1]: Failed to allocate manager object: Permission denied
[!!!!!!] Failed to allocate manager object.
[ 7.459270] systemd[1]: Freezing execution.
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
---
.../recipes-security/ima_policy_hashed/files/ima_policy_hashed | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed b/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed
index 7f89c8d..4d9e4ca 100644
--- a/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed
+++ b/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed
@@ -53,6 +53,9 @@ dont_measure fsmagic=0x43415d53
# CGROUP_SUPER_MAGIC
dont_appraise fsmagic=0x27e0eb
dont_measure fsmagic=0x27e0eb
+# CGROUP2_SUPER_MAGIC
+dont_appraise fsmagic=0x63677270
+dont_measure fsmagic=0x63677270
# EFIVARFS_MAGIC
dont_appraise fsmagic=0xde5e81e4
dont_measure fsmagic=0xde5e81e4
--
2.29.0
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [meta-security][PATCH] ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic
2021-03-01 12:35 [meta-security][PATCH] ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic Ming Liu
@ 2021-03-04 21:04 ` akuster
0 siblings, 0 replies; 2+ messages in thread
From: akuster @ 2021-03-04 21:04 UTC (permalink / raw)
To: liu.ming50, yocto; +Cc: sergio.prado
merged.
Thanks,
Armin
On 3/1/21 4:35 AM, liu.ming50@gmail.com wrote:
> From: Ming Liu <liu.ming50@gmail.com>
>
> This fixes following systemd boot issues:
> [ 7.455580] systemd[1]: Failed to create /init.scope control group: Permission denied
> [ 7.457677] systemd[1]: Failed to allocate manager object: Permission denied
> [!!!!!!] Failed to allocate manager object.
> [ 7.459270] systemd[1]: Freezing execution.
>
> Signed-off-by: Ming Liu <liu.ming50@gmail.com>
> ---
> .../recipes-security/ima_policy_hashed/files/ima_policy_hashed | 3 +++
> 1 file changed, 3 insertions(+)
>
> diff --git a/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed b/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed
> index 7f89c8d..4d9e4ca 100644
> --- a/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed
> +++ b/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed
> @@ -53,6 +53,9 @@ dont_measure fsmagic=0x43415d53
> # CGROUP_SUPER_MAGIC
> dont_appraise fsmagic=0x27e0eb
> dont_measure fsmagic=0x27e0eb
> +# CGROUP2_SUPER_MAGIC
> +dont_appraise fsmagic=0x63677270
> +dont_measure fsmagic=0x63677270
> # EFIVARFS_MAGIC
> dont_appraise fsmagic=0xde5e81e4
> dont_measure fsmagic=0xde5e81e4
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2021-03-04 21:04 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-03-01 12:35 [meta-security][PATCH] ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic Ming Liu
2021-03-04 21:04 ` akuster
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.